$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a631d7-b23c-3ed8-906b-e1d2f57ca387.roa File: 20a631d7-b23c-3ed8-906b-e1d2f57ca387.roa (raw, json) Hash identifier: e1XAtB+jPbOSkScnVMitIdzHod+EZGZ4/leVUGjqwFA= Subject key identifier: FB:A1:B0:42:FB:FE:CD:1E:80:47:02:4E:CD:8B:25:86:8C:57:2F:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7FE180E7A5A3DE9DB1800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a631d7-b23c-3ed8-906b-e1d2f57ca387.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.213.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:fe:18:0e:7a:5a:3d:e9:db:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=80107011-4317-47aa-981c-9f1f921f33c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:cb:3c:05:07:14:92:d8:35:26:94:1b:ae: 5d:c5:33:87:33:58:1c:2e:29:a0:c7:90:86:91:9b: e3:c0:a9:b2:09:7a:03:90:57:7b:9a:de:d0:d6:d3: f2:4a:c9:3d:54:df:73:88:12:c5:32:41:94:8f:65: 43:41:5e:e1:0e:f4:3a:08:ef:33:0f:61:0b:e1:8c: 72:64:0e:dd:c3:3d:ee:8f:15:85:07:7d:0d:85:bf: 05:3c:2f:32:93:c4:21:61:dd:16:46:b9:2e:f0:8b: 13:49:77:dd:be:45:7f:8f:43:20:ce:6e:5f:a5:27: 18:d3:be:fd:04:7e:a5:f8:31:d8:23:aa:b3:5b:65: e9:6c:51:14:a6:7a:98:48:af:5f:54:5b:43:57:f2: 97:ef:a5:dc:1e:14:b9:63:09:a5:31:4d:62:5b:ef: 42:ca:c4:49:b7:7f:b1:a5:ca:16:48:bf:19:64:aa: 34:ec:66:c9:7e:91:97:0a:cb:3d:78:2f:f6:0a:e8: 80:f6:c5:e2:c5:ea:cf:c3:24:39:65:e9:86:ab:10: 8d:2e:7a:5f:10:3f:68:85:dd:f5:69:ad:d6:59:5f: 25:9a:fd:e6:dd:ca:d1:ca:02:a1:bc:33:58:20:9f: 8c:4a:00:dc:b3:22:5e:0e:b0:46:7e:78:39:55:ed: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A1:B0:42:FB:FE:CD:1E:80:47:02:4E:CD:8B:25:86:8C:57:2F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a631d7-b23c-3ed8-906b-e1d2f57ca387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.213.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2b:53:0b:f9:e6:aa:39:7a:bb:67:df:1b:78:f5:95:a4:28: 8e:35:f2:74:ff:e6:a6:3a:8b:d3:de:56:80:77:e9:30:b5:ba: 9b:5d:d1:41:9b:53:a1:e3:93:f6:97:f9:61:a0:5c:2a:64:ee: f8:26:81:42:1c:ac:f4:14:a3:40:3c:ab:cc:e8:cc:55:59:7e: ae:7f:c9:ed:c3:62:5e:18:a1:fb:cd:9a:78:f3:b9:64:18:58: b9:4c:dd:9d:11:a2:a6:35:b3:c3:0c:c2:95:40:a5:a4:fe:4a: 40:a1:35:70:75:12:d8:fb:c8:69:2c:83:ea:ae:02:55:c9:8b: 17:6d:9a:77:75:13:f5:2a:8f:ee:4d:9b:d1:7f:96:12:8f:71: 37:10:08:be:72:78:44:44:f5:c8:76:54:1e:fb:98:be:d6:1c: 41:87:8e:57:99:05:73:50:39:1d:9b:de:f4:04:4a:f8:fc:6b: e3:0d:f5:50:aa:3d:27:b0:b4:94:cf:ac:71:aa:a3:0f:d1:b9: d3:5d:6b:62:c4:b2:d0:4d:69:76:2d:24:b8:c8:1e:d6:53:62: 9c:0c:b4:41:82:68:0f:46:f6:c1:9a:ca:43:89:12:86:68:0b: f5:4d:33:14:ef:e6:c0:be:69:30:93:11:c0:ed:ea:76:68:33: 34:39:d1:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9/4YDnpaPenbGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODAxMDcwMTEtNDMxNy00N2FhLTk4MWMtOWYxZjkyMWYzM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwfLPAUHFJLYNSaUG65dxTOHM1gcLimgx5CG kZvjwKmyCXoDkFd7mt7Q1tPySsk9VN9ziBLFMkGUj2VDQV7hDvQ6CO8zD2EL4Yxy ZA7dwz3ujxWFB30Nhb8FPC8yk8QhYd0WRrku8IsTSXfdvkV/j0Mgzm5fpScY0779 BH6l+DHYI6qzW2XpbFEUpnqYSK9fVFtDV/KX76XcHhS5YwmlMU1iW+9CysRJt3+x pcoWSL8ZZKo07GbJfpGXCss9eC/2CuiA9sXixerPwyQ5ZemGqxCNLnpfED9ohd31 aa3WWV8lmv3m3crRygKhvDNYIJ+MSgDcsyJeDrBGfng5Ve35iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuhsEL7/s0egEcCTs2LJYaMVy++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBhNjMxZDctYjIzYy0z ZWQ4LTkwNmItZTFkMmY1N2NhMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYtXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0rUwv55qo5ertn3xt49ZWkKI418nT/5qY6i9PeVoB36TC1uptd0UGb U6Hjk/aX+WGgXCpk7vgmgUIcrPQUo0A8q8zozFVZfq5/ye3DYl4YofvNmnjzuWQY WLlM3Z0RoqY1s8MMwpVApaT+SkChNXB1Etj7yGksg+quAlXJixdtmnd1E/Uqj+5N m9F/lhKPcTcQCL5yeERE9ch2VB77mL7WHEGHjleZBXNQOR2b3vQESvj8a+MN9VCq PSewtJTPrHGqow/RudNda2LEstBNaXYtJLjIHtZTYpwMtEGCaA9G9sGaykOJEoZo C/VNMxTv5sC+aTCTEcDt6nZoMzQ50Zw= -----END CERTIFICATE-----Generated at Tue Apr 21 19:14:09 2026 by rpki-client